avast! does not scan https connection. It scans http.
If malware were to be downloaded via https… the file shield/deepscreen will handle it.